Privacy Policy

To provide the RentEase service, we collect the following:

• Identity: your name, email, phone, address, and (for landlords) the property addresses you manage.
• Bank account references: tokenized via our bank-verification partner (Plaid-class). We never see your bank credentials — only an opaque token that lets us initiate ACH transfers you authorize.
• Soft credit report: a single soft credit inquiry at underwriting to assess the size of the rent you can cover. Soft pulls do not affect your credit score.
• Transaction history: every installment paid, every payout sent, and every retry attempt, along with the related payment-method reference (typically the last four digits of a card or a tokenized bank-account id).
• Waitlist signup: the email address you submit on the landing page, the /mortgage calculator sign-up form, or any other waitlist entry point. When you use the mortgage calculator, your cadence preference and estimated rent amount are also stored.
• Payment metadata:when you pay through Stripe we receive a Stripe checkout-session identifier, the amount charged, the payment status, and any metadata we attach (such as your plan ID). We do not receive or store raw card numbers, CVV codes, or full bank account numbers — those remain within Stripe's PCI-DSS Level 1 infrastructure.
• Device and usage data: aggregated analytics (page visits, feature usage, error reports). Used to improve the product; never sold.
• Cookies:described in section 7 below.

We use the data above to:

• Make underwriting decisions on each rent plan.
• Service scheduled installments and retry failed charges.
• Detect and prevent fraud, money laundering, and unauthorized account access.
• Reconcile and disburse monthly landlord payouts via ACH.
• Send transactional emails and SMS (payment receipts, retry notices, payout confirmations).
• Improve the product through aggregated, non-personal analytics.

We do not use your data for advertising, and we do not share it with third-party advertisers.

We share the minimum data necessary with a small set of service providers. Here is who sees what, and what they do with it:

• Stripe — card and ACH processing. Stripe is our PCI-DSS Level 1 payment processor. All card data is handled by Stripe; RentEase servers never receive, store, or transmit raw card numbers, CVV codes, or full bank credentials.
• Credit-bureau partner — soft pull at underwriting only. The report is used to score your application and is not retained by us beyond the decision.
• Bank-verification partner (Plaid-class) — tokenized bank references for ACH debits, payouts, and balance checks. Only opaque tokens live in our database.
• Landlords — to reconcile payouts, we share only the property, the rent amount, and the date of each disbursement. Landlords do not see your full payment history, credit profile, or financial data.
• Tax, legal, and regulatory authorities — when required by law or valid legal process, and only the minimum necessary to comply.

Depending on where you live, you have some or all of the following rights. We make them available everywhere because they are baseline best practice.

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to fix anything that is wrong or out of date.
• Deletion:close your account and ask us to delete data not required for tax or AML compliance (see section 5).
• Portability: receive a machine-readable copy of your data.

To exercise any of these rights, email privacy@polsia.app (or rent-ease@polsia.app if the dedicated inbox is not yet provisioned). We acknowledge within 2 business days and respond within 30 calendar days.

We retain data only as long as we have a legitimate need:

• Account identity: the life of your account plus 7 years after closure (for tax and anti-money-laundering compliance).
• Transaction records: 7 years.
• Underwriting soft-pull reports: not retained beyond the underwriting decision.
• Aggregated, non-personal analytics: retained indefinitely, with all identifiers removed.
• Support correspondence: 2 years after last contact.

Data you provide is stored in cloud infrastructure hosted in the United States. Stripe stores payment metadata in its own PCI-compliant US infrastructure. If you access the service from outside the United States, your data is transferred to and processed in the United States.

We use a small number of cookies, none for advertising:

• Session and authentication: a single httpOnly, Secure, SameSite=Lax cookie issued by our auth provider so you stay signed in.
• Theme preference: stores your light/dark choice across sessions.
• Analytics: aggregated, non-personal counters that help us understand which features are used. You can opt out by emailing privacy@polsia.app.

We never use advertising cookies or third-party tracking pixels.

If you visit from the European Economic Area or the United Kingdom, the General Data Protection Regulation (and the UK GDPR) applies. We rely on the following legal bases:

• Contract: to enter and service your rent plan.
• Legal obligation: to keep transaction records for tax and AML compliance.
• Legitimate interest: fraud prevention, product improvement, and aggregate analytics.
• Consent: for non-essential cookies and for any marketing communications, which you can withdraw at any time.

Your data-subject rights are described in section 4. Our internal data-protection contact is privacy@polsia.app.

The California Consumer Privacy Act (CCPA/CPRA) and similar state laws grant residents additional rights. For California residents:

• Categories collected: identifiers (name, email, phone, address), commercial information (transaction history), internet activity (aggregated analytics), and inferences (underwriting eligibility).
• Sources: directly from you, your bank via our verification partner, the credit-bureau partner, and your device.
• Business purposes:as described in section 2.
• Do not sell or share: RentEase does not sell or share personal information for cross-context behavioral advertising. We have not sold or shared such data in the past 12 months.
• Rights: right to know, right to delete, right to correct, right to limit use of sensitive personal information, and right to non-discrimination. To exercise any of these, email privacy@polsia.app.

RentEase is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, email privacy@polsia.app and we will close the account and delete the data.

We update this policy when our practices change or when the law requires it. The “Last updated” date at the top of this page reflects the most recent change. For material changes, we will email active account holders and post a notice in the app at least 30 days before the change takes effect.

For any privacy question — access requests, deletion, complaints, or general questions — email privacy@polsia.app. If the dedicated mailbox is not yet provisioned, write to rent-ease@polsia.app and we will route your request to the privacy team.